authorization checking added